RE: Purging Blaster.worm

["Parolini, Walter A REV:EX" <Walter.Parolini () gems3 gov bc ca>]

Hi,

I was successful in using the tool from the Symantec website. I had to
change settings in the Remote Procedure Call Service (RPC) in Windows XP
before downloading and running the tool. I changed the failure settings on
the recovery tab to 'Take No Action'.
 

Walter Parolini
Workload Development Programmer
Ministry of Provincial Revenue
Consumer Taxation Branch
Phone: 604 775-0654    Fax: 604 775-0731

-----Original Message-----
From: Mark Harris [mailto:mharris () aspacesolutions com] 
Sent: August 13, 2003 8:59 AM
To: 'Jose Guevarra'; security-basics () securityfocus com
Subject: RE: Purging Blaster.worm

I have not needed to clean any system here (all clean), but Symantec website
has a scanner that is built to do this. Note though the addition to the
Windows XP process.

Regards,


Mark Harris
Principal Security Consultant

ASPACE Solutions - Leading Business Minds
T: +44 (0)20 7744 6248
M: +44 (0)7867 526 808
Website www.aspacesolutions.com

Three Tuns House
109 Borough High Street
London SE1 1NL


-----Original Message-----
From: Jose Guevarra [mailto:jose () iquest ucsb edu]
Sent: 13 August 2003 01:07
To: security-basics () securityfocus com
Subject: Purging Blaster.worm


Hi,

 Has anyone successfully purged the MSBlaster worm. There is a tool out
there that can do it but is it reliable?

thanx,

============


---------------------------------------------------------------------------
----------------------------------------------------------------------------




---------------------------------------------------------------------------
----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------